A former employee of a plastic surgery clinic in Los Angeles has done the most dreaded thing and reportedly stolen records of more than 15,000 patients, including famous ones.

The culprit left her job at the Rodeo Drive office of Dr. Zain Kadri “after being accused of fraud on her time charts,” The New York Daily News reports. The clinic later found out through an audit that the employee had been violating patient privacy by copying records and sneaking cell phone pictures during medical procedures:

Kadri’s office said that the employee, who was originally hired in September as a driver and translator but moved to more administrative work, would take pictures of files including information including credit cards and other sensitive personal data during her time at the company up through March.

She would also allegedly take pictures of patients getting various nips and tucks, though that was not discovered until after she had left the company after being confronted with the results of an internal audit.

The Kadri spokesman said that those images on a corporate phone were discovered after the employee violated a restraining order earlier this month, but left the device as she was being escorted away by police.

The employee also allegedly broke in and stole hard drives and files from the records center. A notice on the clinic’s website identifies the former employee and states that “the company no longer has contact details for the majority of the Patients effected, as all paper records and local data storages were stolen during a physical break-in of our records facility during the week of May 1st.” There’s no indication whether those records will be used or publicly released.